Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231311	10	危険	tintin	-	TinTin++ および WinTin++ の add_line_buffer 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0671	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

231312	4.3	警告	sift	-	Sift Unity の search.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0669	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

231313	3.6	注意	website meta language	-	WML における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-0666	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

231314	3.6	注意	website meta language	-	WML の wml_backend/p1_ipp/ipp.src における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-0665	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

231315	6.4	警告	WordPress.org	-	WordPress の XML-RPC 実装における他のブログユーザの投稿を編集される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0664	2012-12-20 18:34	2008-02-5	Show	GitHub Exploit DB Packet Storm

231316	7.5	危険	simple os cms	-	Simple OS CMS の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0650	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

231317	7.5	危険	portail web php	-	Portail Web Php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0645	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

231318	10	危険	シマンテック	-	Symantec Ghost Solution Suite における任意のコマンドを実行される脆弱性	CWE-287 不適切な認証	CVE-2008-0640	2012-12-20 18:34	2008-02-7	Show	GitHub Exploit DB Packet Storm

231319	9.3	危険	シマンテック	-	Symantec Veritas Storage Foundation の VEA サービスにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0638	2012-12-20 18:34	2008-02-20	Show	GitHub Exploit DB Packet Storm

231320	7.5	危険	sejoong namo	-	Sejoong Namo ActiveSquare で使用される NamoInstaller.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0634	2012-12-20 18:34	2008-02-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297571	7.8	HIGH Local	soapbox_project	soapbox	Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.	CWE-269 Improper Privilege Management	CVE-2012-6302	2024-11-21 10:45	2020-01-25	Show	GitHub Exploit DB Packet Storm

297572	7.5	HIGH Network	freeciv	freeciv	Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.	CWE-400 Uncontrolled Resource Consumption	CVE-2012-6083	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

297573	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

297574	9.8	CRITICAL Network	babygekko	babygekko	BabyGekko before 1.2.4 allows PHP file inclusion.	CWE-20 Improper Input Validation	CVE-2012-5699	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

297575	8.8	HIGH Network	babygekko	babygekko	BabyGekko before 1.2.4 has SQL injection.	CWE-89 SQL Injection	CVE-2012-5698	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

297576	9.8	CRITICAL Network	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or …	CWE-78 OS Command	CVE-2012-5878	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

297577	8.8	HIGH Adjacent	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2)…	CWE-78 OS Command	CVE-2012-5693	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

297578	7.5	HIGH Network	openbsd	textproc\/isearch	The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).	CWE-269 CWE-459 Improper Privilege Management Incomplete Cleanup	CVE-2012-5663	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

297579	7.5	HIGH Network	freeciv fedoraproject	freeciv fedora	A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed woul…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5645	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

297580	7.5	HIGH Network	gnome debian	gnome_keyring debian_linux	gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function	CWE-20 Improper Input Validation	CVE-2012-6111	2024-11-21 10:45	2019-12-21	Show	GitHub Exploit DB Packet Storm